Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the 
application. Applicant has submitted a new complete claim set showing marked up 
claims with insertions indicated by underlining and deletions indicated by strikeouts 
and/or double bracketing. 

Listing of Claims: 

1 . (Currently Amended) A method for loading an executable program and 
associated modification code segments, the method comprising the steps of: 

receiving a set of original program segments referenced by the executable 
program, each of the set of original program segments comprising executable binary 
code; 

identifying a set of substitute program segments associated with ones of the 
original set of program segments; 

modifying executable binary code of the ones of the original set of program 
segments to include an exception inducing code, the exception inducing code 
comprising executable binary code; and 

creating an association between ones of the set of original program segments 
and ones of the set of substitute program segments, each association comprising a 
program matching criteria po li cy for determining whether to execute the substitute 
program segment depending on an identity of a calling module of the original program 
segment. 

2. (Canceled) 
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3. (Original) The method of claim 1 wherein the substitute program segments comprise 
functions. 

4. (Original) The method of claim 3 wherein the functions comprise application program 
interfaces. 

5. (Original) The method of claim 4 wherein the application program interfaces are part 
of an operating system. 

6. (Original) The method of claim 1 wherein the creating an association step comprises 
building a table entry including a called original program segment reference and a 
substitute program segment reference. 

7. (Original) The method of claim 6 wherein the called original program segment 
reference comprises an address. 

8. (Original) The method of claim 6 further comprising storing a portion of the original 
program segment replaced by the exception inducing code in table entry. 

9. (Original) The method of claim 6 further comprising storing a condition description 
specifying a program execution state under which a substitute program segment will 
not be executed in place of an associated called original program segment. 

1 0. (Original) The method of claim 1 wherein the identifying step comprises searching a 
program modification database including a set of identified programs and 
corresponding substitute program segments. 
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1 1 . (Previously Presented) The method of claim 1 further comprising the steps of: 

loading the executable program into active process space; 

identifying an in-memory patch within the program modification database 
corresponding to the executable program; and 

inserting the in-memory patch within the executable program residing in the 
active process space. 

1 2. (Currently Amended) A method for loading an executable program comprising 
executable binary code and having associated modification code segments, the method 
comprising the steps of: 

loading, for execution, a copy of the executable program in active process space; 
identifying a set of modifications corresponding to the executable program; and 
modifying executable binary code of the copy of the executable program in 
active process space to include an exception inducing code, wherein the exception 
inducing code comprises executable binary code that induces execution of an exception 
handling routine for determining and executing at least a corresponding one of the set 
of modifications; and associating, with each of the set of modifications, a program 
matching criteria po l icy for determining whether to execute the modified executable 
binary code depending on an identity of a calling module of the modified executable 
binary code. 

1 3. (Currently Amended) A method for implementing execution of substitute program 
segments associated with an active executable program, the method comprising the 
steps of: 

calling, from a calling module having an identity, an original program segment of 

the active executable program that has been modified to include aft a previously placed 

exception inducing code, the previously placed exception inducing code comprising 
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executable binary code that induces an exception handled by an exception handling 
routine; 

detecting the previously placed exception inducing code; 

determining a corresponding substitute program segment entry in a program 
segment substitution list; 

determining whether to execute a substitute program segment associated with 
the corresponding substitute program segment entry depending on the identity of the 
calling module; and 

if so determined executing the substitute program segment in place of the 
original program segment. 

1 4. (Previously Presented) The method of claim 1 3 wherein determining whether to 
execute a substitute program segment comprises determining, by reference to an 
exclusion/inclusion policy associated with the instance of the exception inducing code, 
whether to perform the substitute program segment in place of the original program 
segment, wherein the exclusion/inclusion policy identifies at least a condition 
depending on the identity of the calling module under which the corresponding 
substitute program segment will not be executed in place of an associated original 
program segment. 

1 5. (Original) The method of claim 1 4 wherein the corresponding substitute program 
segment entry includes a portion of the original program segment replaced by the 
exception inducing code, and further comprising the step of determining that the 
condition under which the corresponding substitute program segment will not be 
executed has been fulfilled, and in response restoring within a program code execution 
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stream the portion of the original program segment replaced by the exception inducing 
code. 

1 6. (Original) The method of claim 1 3 wherein the substitute program segments 
comprise functions. 

1 7. (Original) The method of claim 1 6 wherein the functions comprise application 
program interfaces. 

1 8. (Original) The method of claim 1 7 wherein the application program interfaces are 
part of an operating system. 

1 9. (Original) The method of claim 1 3 wherein the corresponding substitute program 
segment entry includes a called original program segment reference and a substitute 
program segment reference. 

20. (Currently Amended) A computer-readable medium having computer-executable 
instructions for facilitating loading an executable program and associated modification 
code segments, the computer-executable instructions facilitating performing the steps 
of: 

receiving a set of original program segments referenced by the executable 
program, each of the set of original program segments comprising executable binary 
code; 

identifying a set of substitute program segments associated with ones of the 
original set of program segments; 
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modifying executable binary code of the ones of the original set of program 
segments to include an exception inducing code, the exception inducing code 
comprising executable binary code; and 

creating an association between ones of the set of original program segments 
and ones of the set of substitute program segments, each association comprising a 
program matching criteria po li cy for determining whether to execute the substitute 
program segment depending on an identity of a calling module of the original program 
segment. 

21. (Canceled) 

22. (Original) The computer-readable medium of claim 20 wherein the substitute 
program segments comprise functions. 

23. (Original) The computer-readable medium of claim 22 wherein the functions 
comprise application program interfaces. 

24. (Original) The computer-readable medium of claim 23 wherein the application 
program interfaces are part of an operating system. 

25. (Original) The computer-readable medium of claim 20 wherein the creating an 
association step comprises building a table entry including a called original program 
segment reference and a substitute program segment reference. 

26. (Original) The computer-readable medium of claim 25 wherein the called original 
program segment reference comprises an address. 
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27. (Original) The computer-readable medium of claim 25 further comprising 
computer-executable instructions facilitating: 

storing a portion of the original program segment replaced by the exception 
inducing code in table entry. 

28. (Original) The method of claim 25 further comprising computer executable 
instructions facilitating: 

storing a condition description specifying a program execution state under which 
a substitute program segment will not be executed in place of an associated called 
original program segment. 



29. (Original) The computer-readable medium of claim 20 wherein the identifying step 
comprises searching a program modification database including a set of identified 
programs and corresponding substitute program segments. 



30. (Original) The computer-readable medium of claim 20 further comprising 
computer-executable instructions facilitating: 

loading an executable program into active process space; 

identifying an in-memory patch within the program modification database 
corresponding to the executable program; and 

inserting an in-memory patch within the executable program residing in the 
active process space. 

31 . (Currently Amended) A computer-readable medium having computer-executable 
instructions for facilitating implementing execution of substitute program segments 
associated with an active executable program, the computer-executable instructions 
facilitating performing the steps of: 
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calling, from a calling module having an identity, an original program segment of 
the active executable program that has been modified to include aft a previously placed 
exception inducing code, the previously placed exception inducing code comprising 
executable binary code that induces an exception handled by an exception handling 
routine; 

detecting the previously placed exception inducing code; 

first determining a corresponding substitute program segment entry in a 
program segment substitution list; 

determining whether to execute a substitute program segment associated with 
the corresponding substitute program segment entry depending on the identity of the 
calling module; and 

if so determined, executing the substitute program segment in place of the 
original program segment. 

32. (Previously Presented) The computer-readable medium of claim 3 1 wherein 
determining whether to execute a substitute program segment comprises determining, 
by reference to an exclusion/inclusion policy associated with the instance of the 
exception inducing code, whether to perform the substitute program segment in place 
of the original program segment, wherein the exclusion/inclusion policy identifies at 
least a condition depending on the identity of the calling module under which the 
corresponding substitute program segment will not be executed in place of an 
associated original program segment. 

33. (Original) The computer-readable medium of claim 32 wherein the corresponding 
substitute program segment entry includes a portion of the original program segment 
replaced by the exception inducing code, and further comprising computer-executable 
instructions facilitating: 
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determining that the condition under which the corresponding substitute 
program segment will not be executed has been fulfilled, and in response restoring 
within a program code execution stream the portion of the original program segment 
replaced by the exception inducing code. 

34. (Original) The computer-readable medium of claim 32 wherein the substitute 
program segments comprise functions. 

35. (Original) The computer-readable medium of claim 34 wherein the functions 
comprise application program interfaces. 

36. (Original) The computer-readable medium of claim 35 wherein the application 
program interfaces are part of an operating system. 

37. (Original) The computer-readable medium of claim 31 wherein the corresponding 
substitute program segment entry includes a called original program segment reference 
and a substitute program segment reference. 

38. (Currently Amended) A program execution system facilitating modifying an 
executable program, including a set of original program segments referenced by the 
executable program, each of the set of original program segments comprising 
executable binary code, the program execution system comprising: 

a program modification database for storing a set of substitute program 
segments associated with ones of the original set of program segments; 

a program loader for installing a copy of the executable program into an active 
process space; 

Type of Response: Amendment 
Application Number: 09/801 ,951 
Attorney Docket Number: 1 54596.01 
Filing Date: 3/8/01 

10/22 



a program code modifier for altering, within the active process space, executable 
binary code of the ones of the original set of program segments to include an exception 
inducing code, the exception inducing code comprising executable binary code; and 

a substitution list including entries describing an association between ones of 
the set of original program segments and ones of the set of substitute program 
segments, each association comprising a program matching criteria aeti^v for 
determining whether to execute the substitute program segment depending on an 
identity of a calling module of the original program segment. 

39. (Canceled) 

40. (Original) The program execution system of claim 38 wherein the substitute 
program segments comprise functions. 

41 . (Original) The program execution system of claim 40 wherein the functions 
comprise application program interfaces. 

42. (Original) The program execution system of claim 41 wherein the application 
program interfaces are part of an operating system. 

43. (Original) The program execution system of claim 38 wherein individual entries 
within the substitution list included a called original program segment reference and a 
substitute program segment reference. 

44. (Original) The program execution system of claim 43 wherein individual entries 
within the substitution list include a portion of the original program segment replaced 
by the exception inducing code. 
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45. (Original) The program execution system of claim 38 further comprising: 

an in-memory patch within the program modification database corresponding to 
the executable program; and 

an in-memory patching function for inserting the in-memory patch within the 
executable program residing in the active process space. 
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